Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          X4eT/GUUP2pkdsN7pXzC7AIR8q5nHkleUFHr57fNsY0=
Subject key identifier:   BB:F2:47:03:AD:FC:47:11:21:67:DA:B6:5A:F7:AE:C5:44:1E:84:9B
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       01968322DB5DD44A947D24D6B470D52C3D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          152C
Signing time:             Tue 29 Apr 2025 20:00:21 +0000
Manifest this update:     Tue 29 Apr 2025 20:00:21 +0000
Manifest next update:     Wed 30 Apr 2025 20:00:21 +0000
Files and hashes:         1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=)
                          2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=)
                          3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=)
                          4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: QVMO9kGj2/1xlNI64ZSSdnBvCAkqhbhYmQ2+7PuwJYQ=)
                          6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:22:db:5d:d4:4a:94:7d:24:d6:b4:70:d5:2c:3d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Apr 29 20:00:21 2025 GMT
            Not After : Apr 30 20:00:21 2025 GMT
        Subject: CN=bbf24703adfc47112167dab65af7aec5441e849b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2e:ee:e3:a8:6c:12:ee:9d:b6:29:5c:f9:dd:
                    4a:74:19:cb:24:eb:17:20:79:4d:dc:4c:5d:9b:51:
                    0b:71:16:56:20:ce:dc:c6:5f:e9:2a:3e:28:df:64:
                    d9:88:83:c9:c6:d6:71:9c:12:95:ea:2a:28:fa:22:
                    5b:43:fd:4f:cf:58:5d:88:b3:e0:98:6b:ea:dd:f6:
                    80:09:7b:7e:87:b2:1c:4a:28:46:e9:85:c0:87:73:
                    16:41:8d:27:f6:79:60:ed:c3:ac:ed:22:11:99:f9:
                    25:55:b2:9a:4c:85:19:57:a6:c8:77:1f:29:67:38:
                    0d:3f:12:dc:d6:f1:0a:96:84:b8:34:23:16:cc:37:
                    5a:8b:3b:94:0c:7a:00:c5:da:57:2c:60:40:4b:c4:
                    e4:68:c6:72:c7:bc:c0:06:0a:91:e9:c8:5a:18:4b:
                    9f:64:db:18:2b:b5:77:b1:b9:d4:e6:b0:7a:37:2e:
                    7c:41:1d:37:7f:8c:64:74:c6:6c:f5:44:21:e7:18:
                    0e:2b:8f:ff:0a:d2:37:c7:46:6d:be:74:5a:5b:ce:
                    49:f4:bf:59:67:35:ab:55:e0:cb:ca:92:52:03:85:
                    52:da:3d:23:43:56:23:3d:72:74:40:3d:5e:f1:5d:
                    af:e4:8d:03:b3:85:36:44:46:1b:bc:32:6b:c2:fd:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F2:47:03:AD:FC:47:11:21:67:DA:B6:5A:F7:AE:C5:44:1E:84:9B
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e6:19:ac:b1:6c:ef:9d:b9:26:26:4a:cd:c3:a3:0f:a9:b3:
         d6:4e:80:5a:b9:32:ea:08:f5:66:cf:1e:34:61:2f:fd:27:99:
         e7:e9:bd:06:f0:2d:eb:31:3a:73:58:57:27:bb:4b:6f:07:0d:
         ab:c3:01:0f:8f:e4:97:77:4f:0b:f5:95:f0:8f:f9:c2:b7:72:
         90:4d:0e:96:5f:67:c0:38:a2:05:7e:eb:7d:8c:d8:e9:4a:d1:
         87:a0:ba:37:d6:bc:41:13:74:7e:32:f1:2b:d1:42:4e:91:1c:
         15:7f:a2:65:b9:3f:0a:bb:6a:ae:83:f7:d1:45:fd:79:b4:e1:
         c4:9a:3f:4f:a7:ed:4a:2e:ee:48:2f:2b:61:38:23:ab:d3:86:
         98:e1:60:6b:f3:18:76:6c:ad:0d:55:58:12:05:55:7c:43:0d:
         c7:10:b5:d5:80:14:31:b6:ea:b6:cc:83:32:ad:7c:d9:f8:25:
         01:f0:da:5b:d3:a4:42:2d:35:57:a9:bf:3f:0a:e8:40:06:9d:
         a7:dc:99:a5:67:39:06:f4:66:b5:ff:2e:4e:cb:57:99:36:3d:
         a1:b0:c9:c1:56:a9:36:a9:0b:4e:67:38:af:2a:3c:ac:30:99:
         f7:75:07:9c:d5:43:63:99:dc:2f:c9:8f:e8:03:fd:87:95:c3:
         85:50:8f:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIttd1EqUfSTWtHDVLD2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjUwNDI5MjAwMDIxWhcNMjUwNDMwMjAwMDIxWjAzMTEwLwYDVQQD
EyhiYmYyNDcwM2FkZmM0NzExMjE2N2RhYjY1YWY3YWVjNTQ0MWU4NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy7u46hsEu6dtilc+d1KdBnLJOsX
IHlN3Exdm1ELcRZWIM7cxl/pKj4o32TZiIPJxtZxnBKV6ioo+iJbQ/1Pz1hdiLPg
mGvq3faACXt+h7IcSihG6YXAh3MWQY0n9nlg7cOs7SIRmfklVbKaTIUZV6bIdx8p
ZzgNPxLc1vEKloS4NCMWzDdaizuUDHoAxdpXLGBAS8TkaMZyx7zABgqR6chaGEuf
ZNsYK7V3sbnU5rB6Ny58QR03f4xkdMZs9UQh5xgOK4//CtI3x0ZtvnRaW85J9L9Z
ZzWrVeDLypJSA4VS2j0jQ1YjPXJ0QD1e8V2v5I0Ds4U2REYbvDJrwv01hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvyRwOt/EcRIWfatlr3rsVEHoSbMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuYZrLFs
7525JiZKzcOjD6mz1k6AWrky6gj1Zs8eNGEv/SeZ5+m9BvAt6zE6c1hXJ7tLbwcN
q8MBD4/kl3dPC/WV8I/5wrdykE0Oll9nwDiiBX7rfYzY6UrRh6C6N9a8QRN0fjLx
K9FCTpEcFX+iZbk/CrtqroP30UX9ebThxJo/T6ftSi7uSC8rYTgjq9OGmOFga/MY
dmytDVVYEgVVfEMNxxC11YAUMbbqtsyDMq182fglAfDaW9OkQi01V6m/PwroQAad
p9yZpWc5BvRmtf8uTstXmTY9obDJwVapNqkLTmc4ryo8rDCZ93UHnNVDY5ncL8mP
6AP9h5XDhVCPug==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:45:59 2025 by rpki-client